Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
File: PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft (raw, json)
Hash identifier: VzV/do/NeD5KpUzG+z24W50oY73lp6OOS/I3vU3Rq6Y=
Subject key identifier: E1:EA:A5:11:B1:DF:D4:14:7B:65:CB:13:79:BD:76:4E:00:97:5B:AD
Authority key identifier: 3C:14:15:42:16:85:AC:E3:68:2F:16:1D:31:0D:92:72:6C:DF:B0:97
Certificate issuer: /CN=3c1415421685ace3682f161d310d92726cdfb097
Certificate serial: 01A08A1F55DA9C14EF535B4A91A46D6B2AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
Manifest number: 1A43
Signing time: Thu 10 Sep 2026 07:01:44 +0000
Manifest this update: Thu 10 Sep 2026 07:01:44 +0000
Manifest next update: Fri 11 Sep 2026 07:01:44 +0000
Files and hashes: 1: PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl (hash: ph0WujEkBMZJHBdqXTVaJcnGHP5gTSEnzQ8xso2zsdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1f:55:da:9c:14:ef:53:5b:4a:91:a4:6d:6b:2a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1415421685ace3682f161d310d92726cdfb097
Validity
Not Before: Sep 10 07:01:44 2026 GMT
Not After : Sep 11 07:01:44 2026 GMT
Subject: CN=e1eaa511b1dfd4147b65cb1379bd764e00975bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:88:fd:b9:fe:2d:e0:63:4f:a3:f3:02:e1:
3f:26:b9:95:bd:8e:2b:e0:c1:25:da:1c:60:56:ca:
db:36:5f:6c:1d:ff:03:b9:97:61:f5:0e:30:cc:af:
e2:2f:f5:e2:64:d0:6e:a9:1f:77:03:11:05:0e:91:
4a:24:bf:92:3d:0d:d1:a3:4a:f3:13:47:11:02:24:
35:c8:0e:09:50:f1:f8:f8:06:28:1d:cf:17:ee:80:
b6:5d:84:62:9b:7c:aa:2d:f3:db:40:63:ab:3e:8e:
fa:5a:cb:25:df:4b:9b:23:83:88:1a:c0:ea:3a:a3:
ce:7f:e9:4b:b3:d6:28:e4:4e:f3:b0:e0:f1:38:18:
37:53:28:82:f1:d2:94:67:ac:6d:b4:a3:ff:22:48:
ce:52:3e:1f:81:c4:19:42:27:9a:6a:b4:c6:3c:8c:
e3:b6:8e:88:b1:22:fa:b7:81:42:9d:95:3c:15:fb:
9a:1e:cb:ad:b0:09:70:1a:61:18:fa:14:5d:f9:88:
51:e5:fe:4d:e3:fe:0a:4b:81:83:4d:17:e6:40:3c:
52:82:56:c0:59:cd:3a:23:fc:f0:95:9a:c4:26:ab:
83:07:a0:0b:82:4a:bb:03:7d:59:de:ba:5d:eb:1c:
53:cf:c8:48:40:fd:8b:fa:f8:6d:67:96:2a:b4:ad:
df:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EA:A5:11:B1:DF:D4:14:7B:65:CB:13:79:BD:76:4E:00:97:5B:AD
X509v3 Authority Key Identifier:
keyid:3C:14:15:42:16:85:AC:E3:68:2F:16:1D:31:0D:92:72:6C:DF:B0:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0c:18:27:db:8c:79:99:b2:a4:45:ce:ef:e8:c2:13:1e:93:
4b:33:8e:5a:86:f7:66:6d:61:e8:fc:c1:e8:af:80:3d:dc:59:
42:04:93:e6:f0:49:82:87:c5:c5:49:36:ec:72:4b:cc:87:89:
c9:39:22:b2:29:ed:b2:ab:32:4f:1f:3b:71:ba:c2:0b:07:32:
4f:5b:81:aa:1f:22:67:1f:3a:13:d0:5f:f7:f4:f0:a3:34:a1:
ff:8f:cc:5b:69:78:19:db:9f:f6:1f:30:b6:a1:00:d5:55:d2:
77:f9:79:fa:b1:30:79:dc:62:71:66:68:1a:6e:db:cb:08:5f:
8a:78:20:66:33:61:de:2a:3c:e8:95:c7:e5:e1:8c:b3:13:a0:
f6:e0:1b:84:e1:21:c8:f7:db:c8:af:01:f0:c2:f6:d8:fa:ca:
c1:c0:5a:54:95:96:8c:3d:2d:c9:dc:99:11:f3:51:4f:a6:a5:
be:28:89:45:ec:29:76:f7:92:79:1f:0b:cf:73:51:22:87:9c:
e0:c6:8c:a2:fb:1d:c1:ad:0d:21:71:7d:a8:e0:93:17:4f:f3:
34:11:96:ad:b9:8a:72:1a:9a:9e:eb:ee:74:f9:f6:e0:62:4c:
a7:03:e4:03:07:f8:36:96:4f:8b:40:0d:7d:d7:97:e1:31:19:
ef:ea:4d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:15:38 2026 by rpki-client